Certstrap allows looser permissions but not stricter, which can lead to security issues #136
Description
Line 116 in fda01db
It must be a minor mistype, however this actually allows looser permissions and prohibits stricter ones, instead of the opposite that we want.
The corrent statement should be if fi.Mode()&^tag.perm != 0 {